ILT-Interlaboratory Test | Proficiency Testing Provider | Programs
ILT-U-4079

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-4079

External Penetration Testing. (NISCF Penetration Testing Standard V1.1)

SKU: ILT-U-4079 Category: Tags: ,

DETERMINATION

METHOD

Weak authentication (no brute-force protection)NISCF S.3.3.3 / OWASP WSTG v4.2
Default administrator credentials (admin/admin)NISCF S.3.3.3 / OWASP WSTG v4.2
Insecure session cookies (missing Secure/HttpOnly)NISCF S.3.3.3 / OWASP WSTG v4.2
Predictable session tokens (sess-001 pattern)NISCF S.3.3.3 / OWASP WSTG v4.2
Session not invalidated on logoutNISCF S.3.3.3 / OWASP WSTG v4.2
IDOR — read (unauthorized document access)NISCF S.3.3.3 / OWASP WSTG v4.2
IDOR — modify (unauthorized document modification)NISCF S.3.3.3 / OWASP WSTG v4.2
IDOR — delete (unauthorized document deletion)NISCF S.3.3.3 / OWASP WSTG v4.2
Business logic flaw (client-controlled owner_id)NISCF S.3.3.3 / OWASP WSTG v4.2
Fail-insecure access controlsNISCF S.3.3.3 / OWASP WSTG v4.2
Missing anti-CSRF protectionNISCF S.3.3.3 / OWASP WSTG v4.2
SQL Injection (document search)NISCF S.3.3.3 / OWASP WSTG v4.2
Stored XSS (document content)NISCF S.3.3.3 / OWASP WSTG v4.2
Stored XSS via malicious file uploadNISCF S.3.3.3 / OWASP WSTG v4.2
OS Command Injection (export filename)NISCF S.3.3.3 / OWASP WSTG v4.2
Malicious file upload acceptanceNISCF S.3.3.3 / OWASP WSTG v4.2
Debug information exposureNISCF S.3.3.3 / OWASP WSTG v4.2
Environment file exposureNISCF S.3.3.3 / OWASP WSTG v4.2
Server version banner leakNISCF S.3.3.3 / OWASP WSTG v4.2
Approval workflow bypassNISCF S.3.3.3 / OWASP WSTG v4.2
Hidden admin endpointsNISCF S.3.3.3 / OWASP WSTG v4.2
Evaluator dashboardsNISCF S.3.3.3 / OWASP WSTG v4.2
Unauthorized document sharingNISCF S.3.3.3 / OWASP WSTG v4.2
Weak password reset/change mechanismNISCF S.3.3.3 / OWASP WSTG v4.2
Profile IDOR (read/modify)NISCF S.3.3.3 / OWASP WSTG v4.2
Server-Side Template Injection (SSTI)NISCF S.3.3.3 / OWASP WSTG v4.2
Overall conformity of the DUTScored rubric evaluation (6 categories, pass threshold >=70%)
Share
Related products
Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-2533

Software static test. Desktop Application

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-1745

Artificial Intelligence. Machine Learning. Deep Learning. How much can it learn?

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-1744

Software static test: Code verification to ensure safety requirements.

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-3553

Penetration Test on Website Application.

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-802

Mobile Application Security Proficiency Test. Aligned with the App Defense Alliance Mobile Application Security Testing Approach

Request Quote
ILT-Interlaboratory Test | Proficiency Testing Provider | Programs

ILT-U-1887

External Interface Security Assessment. GB 44495 (Clause 7.1 & 8.3) Phase 1 – Foundation Level